Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    One Voucher Per Device

    Scheduled Pinned Locked Moved Captive Portal
    147 Posts 12 Posters 40.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • GertjanG
      Gertjan @Iahmad
      last edited by

      @ishtiaqaj said in One Voucher Per Device:

      my is i want one voucher for only and only for one device.

      Right now, pfSense uses the last device active. Not the first.
      So, you need to "code and test" - the question was already asked in the past, so https://forum.netgate.com/topic/130046/disable-concurent-user-is-useless/6 for more info what you could do to change the default behavior.

      Btw :
      @ishtiaqaj said in One Voucher Per Device:

      and enable pass-through mac

      Using this option goes against what you are asking for - I advise you not to use "pass-through mac".

      No "help me" PM's please. Use the forum, the community will thank you.
      Edit : and where are the logs ??

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        It's been a while since I used it but as I recall with single-use vouchers (disable concurrent logins) then if another device uses the voucher, it is the one that now has access.

        This allows people to move the voucher from device to device (like wired to wireless) without needing a voucher.

        If they give their voucher to someone else, well, I guess they shouldn't do that.

        Using pass-through MAC is a great way to grant really long-term vouchers (like weeks or months) because you don't have to worry about balancing DHCP with the captive portal timeout settings.

        If, when you enable both auto-added pass-through MAC and disable concurrent users the MAC table is cleared and replaced with the latest login, it is working as expected. You might be able to get the behavior you desire for your specific circumstance in your login page php.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • I
          Iahmad
          last edited by Iahmad

          @derelict said in One Voucher Per Device:

          If, when you enable both auto-added pass-through MAC and disable concurrent users the MAC table is cleared and replaced with the latest login, it is working as expected. You might be able to get the behavior you desire for your specific circumstance in your login page php.

          @Derelict how can i get the desire scenario on my login page. please help me i am not a skilled user.
          this feature was working in 2.4.3-1 and previous versions what have change in 2.4.4. please guide me how to do this in 2.4.4

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            I am not a programmer. Sorry. You would do best to explicitly and clearly state:

            1. What you are doing (steps to reproduce)
            2. What the expected result is
            3. What it happening instead

            That would be the starting point for a bug report.

            I suggest the steps to reproduce are from a new CP instance in its default configuration with the default login page. Keep it as simple as you can to demonstrate the specific issue you wish to report.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • I
              Iahmad
              last edited by Iahmad

              @Derelict i am sorry but i did't get from your post.
              please anybody else who can help me..

              @Derelict @Gertjan just like mobile recharge prepaid cards person uses and through nobody can use this card again... but according to pfsense new feature anybody can use the cards of others...just like my case i am providing internet in labor camp. the people can steal the cards other which cause severe problem for me.

              GertjanG 1 Reply Last reply Reply Quote 0
              • GertjanG
                Gertjan @Iahmad
                last edited by Gertjan

                @ishtiaqaj said in One Voucher Per Device:

                @Derelict i am sorry but i did't get from your post.
                please anybody else who can help me..

                @Derelict was asking for details : your setup, info about how you want it to work.

                @Derelict @Gertjan just like mobile recharge prepaid cards person uses and through nobody can use this card again... but according to pfsense new feature anybody can use the cards of others...just like my case i am providing internet in labor camp. the people can steal the cards other which cause severe problem for me.

                Like credit cards : if they are stolen then that means troubles for everybody. Your client should come back to you to get a new card, you should block the old card, etc.

                I suggest for you :
                Vouchers with a real short validity time, something like 5 minutes or even less.
                The "checked disable concurrent login" isn't needed, but could be activated.
                Use also the "Pass-through MAC Auto Entry" option. The MAC(device) will have an indefinitely access, up to you to delete it after X time.

                What you really need is probably what has been mentioned here https://forum.netgate.com/topic/130046/disable-concurent-user-is-useless
                First time login using vouchers that sticks with that device - the voucher can't be used for any other device any more.
                As said, this option doesn't exist at this moment.

                People shouldn't hand out their vouchers to other people, and this is enforced by the fact that "disable concurrent login" will disconnected their (first) device, like not giving away their credit card.

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                1 Reply Last reply Reply Quote 0
                • I
                  Iahmad
                  last edited by Iahmad

                  @Gertjan @Derelict .
                  I am giving Internet Service in multuple labour camps.. my vouchers are for 30 days. as 4 to 5 persons live in one room so there are much chance they can see or stole room fellows cards.. and for me its not possible to delete mac of stolen voucher cause its time consuming and unprofessional approch..
                  2.4.3-1 was working well.
                  i regret why i update to 2.4.4
                  i am just asking please provide help piece of code and how to di that would do the same.

                  A 1 Reply Last reply Reply Quote 0
                  • I
                    Iahmad
                    last edited by

                    @Gertjan @Derelict
                    getting no help from forum many days passed.
                    nobody wants to help??

                    GertjanG 1 Reply Last reply Reply Quote 0
                    • GertjanG
                      Gertjan @Iahmad
                      last edited by

                      @ishtiaqaj said in One Voucher Per Device:

                      nobody wants to help??

                      Because there is no answer that brings a solution for your case.
                      5 people in a room that steal vouchers will steel also passwords, and if you stop this (can you ?) then they will share the same device.
                      And then things will get worse : these 5 people could start thinking, and then they will find this device (15 $ at Amazone) that will connect to you wifi with one voucher (or one password/user) and knowing so your pfSense only sees the one IP/MAC of this device, so it seees just "one user". Or, this device will offer a locally generated, in the room, WiFi network that permit all 5 users to connect, and you can't see anything, so you can't do nothing, except throttling the bandwidth a max. ....

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      1 Reply Last reply Reply Quote 0
                      • I
                        Iahmad
                        last edited by

                        Dear @Gertjan you are right they can connect more devices but share the fix speed(1mbps) so they will get slow speed. slow speed nobody like definately they will take new voucher.

                        1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan
                          last edited by

                          With FreeRadius you can also add a new limitation factor : quantity of data a day, week or month.
                          When it's up, for the rest of the day, week or month the connection will be stopped.

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          1 Reply Last reply Reply Quote 0
                          • A
                            ajmaltms @Iahmad
                            last edited by

                            @ishtiaqaj same problem for mee too..any solutions ?

                            I 1 Reply Last reply Reply Quote 0
                            • I
                              Iahmad @ajmaltms
                              last edited by

                              @ajmaltms said in One Voucher Per Device:

                              @ishtiaqaj same problem for mee too..any solutions ?

                              @ajmaltms no solution yet get... using old version 2.4.2..
                              @Derelict help us

                              A 1 Reply Last reply Reply Quote 0
                              • A
                                ajmaltms @Iahmad
                                last edited by

                                @ishtiaqaj okey..hope somebody will find a solution for this..

                                1 Reply Last reply Reply Quote 0
                                • DerelictD
                                  Derelict LAYER 8 Netgate
                                  last edited by

                                  Did anyone document and open a bug report?

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  F 1 Reply Last reply Reply Quote 0
                                  • F
                                    free4 Rebel Alliance @Derelict
                                    last edited by free4

                                    @Derelict I don't think a bug report is needed here....the problem seems due to settings misconfiguration. It should however be documented. I made a fist pull request to pfsense Docs, I'll wait for it to be approved before making the change.

                                    @ishtiaqaj said in One Voucher Per Device:

                                    I want one voucher for only and only for one device. (...) even if i enable pass-through mac.
                                    this problem arise in version 2.4.4, in previous versions pfsense CP was working fine.

                                    "Add connected users as Pass trough Mac" is not compatible with "disable concurrent connections". Because ....well because that's the purpose of pass-through.

                                    • Pass through MAC : these MAC addresses will be whitelisted. As such, they will never be disconnected
                                    • Disallow concurrent logins : disconnect the previous device when a new device use the same logins

                                    Could you explain precisely why are you using pass through MAC addresses exactly ? I think you should use vouchers with a very long expiration date (eg, 6 month or more) instead ....

                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      ajmaltms @free4
                                      last edited by

                                      @free4 voucher with long expiration date means(hard timeout ) ??...

                                      F 1 Reply Last reply Reply Quote 0
                                      • F
                                        free4 Rebel Alliance @ajmaltms
                                        last edited by

                                        @ajmaltms said in One Voucher Per Device:

                                        @free4 voucher with long expiration date means(hard timeout ) ??...

                                        I was thinking that you was using vouchers

                                        If you are using another authentication method, then you could set a very long "idle timeout"

                                        A 1 Reply Last reply Reply Quote 0
                                        • A
                                          ajmaltms @free4
                                          last edited by

                                          @free4 yes..am using voucher code method..because i need to generate almost 500 vouchers every month..

                                          1 Reply Last reply Reply Quote 0
                                          • GertjanG
                                            Gertjan
                                            last edited by Gertjan

                                            I know it isn't a permanent solution, but here https://forum.netgate.com/topic/136995/one-voucher-per-device/3 I posted the link that locks down a voucher to "one voucher => one user".

                                            I tested that code and it worked.

                                            It needs some code patching .... true, but, hey, it's just PHP ;)

                                            A more permanent solution would be a feature request (check if one already exists first) https://redmine.pfsense.org/projects/pfsense

                                            No "help me" PM's please. Use the forum, the community will thank you.
                                            Edit : and where are the logs ??

                                            A 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.